Daily security scan

Date · 2026-10-22 (UTC — plugins first indexed that day)

Static scan · new today

rule heuristics · shape only

critical

high

medium

137

low

Tier = scan verdict: critical hit → critical; warning / non-blocking critical → high / medium; none → low.

Dynamic audit · subset of new today

model reads source · no execution

critical

high

medium

low

Only entries static-flagged ≥ warn are audited; tier = highest finding. Of 193 new entries, 185 are out of the queue or have no conclusion yet.

Plugin	Static	Dynamic	Findings C/W/I	Manifest	Indexed
@wing-tn/astro-ph-researcher Astronomy research workbench for DSH and Codex: NADC terms, references, writing, scoring, author confirmation, physics/recommended books, FITS/XML formats and analysis guides.	medium	not audited	0/3/10	0/0	2026-10-22 00:16
@Gorkaseto/dsh-markdownize A DSH plugin that converts documents to Markdown so an LLM can read them.	medium	not audited	0/1/2	0/0	2026-10-22 00:16
@Yoimiya-Lover-0621-01/himeko-starry-night 姬子的星月夜 — DSH 星云壁纸 + 液态玻璃主题插件	medium	not audited	0/1/3	0/0	2026-10-22 00:16
@Yoimiya-Lover-0621-01/dsh-local-avatar DSH 本地账户头像插件：用一张本地图片覆盖侧栏与设置里的账户头像	low	not audited	0/0/3	0/0	2026-10-22 00:16
@yzsuki-afk/ticklist-calendar 日历清单 · DSH 插件：月/周/列表/看板四视图 + 独立 AI 对话	low	not audited	0/0/4	0/0	2026-10-22 00:16
@cheems135/dsh-qq-bridge QQ (NapCat / OneBot 11) bridge for DSH - chat with your harness from QQ, with a full management panel	low	not audited	0/0/0	0/0	2026-10-22 02:16
@summersummer-liu/dsh-su SketchUp 2023 bridge plugin for DSH: drive a live SU session (Ruby tasks, .skp save, viewport capture) through 8 agent tools.	high	medium	1/2/6	0/0	2026-10-22 02:16
@hyzmm/dsh-notch-pet An animated companion that shows live DSH agent progress in the macOS notch.	medium	not audited	0/1/1	0/0	2026-10-22 02:16
@onfzi/dsh-plugin-usage-pulse DSH Web UI plugin: live DeepSeek peak / off-peak pricing, token spend and hourly usage bars in the composer dock.	low	not audited	0/0/2	0/0	2026-10-22 02:16
@fotor-ai/dsh-fotor-plugin Script-free Fotor plugin bundle for DSH, distributed from reviewed source snapshots.	low	not audited	0/0/0	0/0	2026-10-22 02:16
@lhhzmz229/dsh-api-runner DSH 插件：按 YAML 配置调用后端接口、启停/接管本地 Java 服务、按字节偏移增量读日志并等待日志特征，让模型改完代码自己验证	medium	medium	0/16/28	0/0	2026-10-22 02:16
@gongstudent/dsh-moyu 摸鱼套件 dsh-moyu 的抖音模块。鼠标悬停即现的推荐流播放器，滚轮切视频，移开自动暂停；宿主侧签名与媒体反代	medium	not audited	0/1/12	0/0	2026-10-22 02:16
@golddream-y/ratel-dsh-lumina	low	not audited	0/0/0	0/0	2026-10-22 02:16
@howpy/dragonfly_chatbot Dragonfly technical knowledge search and cited answers for DSH	medium	not audited	0/1/1	0/0	2026-10-22 02:16
@xfyang728/dsh-router-wpslingxi DSH plugin: WPS Lingxi (灵犀) supplier for dsh-router over the cowork WebSocket channel — reasoning, real sandbox code execution, artifact fetch-back.	low	not audited	0/0/8	0/0	2026-10-22 02:16
@Bear0117/dsh-plugin-recursive-harness Recursive Harness for DSH: Propose, Probe, Compose loops and a cross-task experience library (Harness², arXiv:2610.14224). Work in progress.	medium	not audited	0/9/6	0/0	2026-10-22 02:16
@Mr-Maidong/dsh-mcp-mcp-status MCP server inventory for the DSH Web Settings dialog: status, transport, target, tools, and enable/disable for every configured MCP server	low	not audited	0/0/3	0/0	2026-10-22 02:16
@yunxingwoo/dsh-workbuddy DSH 插件：把 WorkBuddy（国内版/国际版）账号接入模型选择器，提供账号池、模型勾选、积分倍率、每日签到与只读积分胶囊	medium	not audited	0/3/7	0/0	2026-10-22 02:16
@xiaohai-78/dsh-request-params Add your own parameters to the model requests dsh sends: OpenRouter provider routing, fallback models, reasoning, sampling and custom fields, and headers, for any gateway.	low	not audited	0/0/5	0/0	2026-10-22 02:16
@anonamerjaxon-dev/dsh-preset-categorizer Categorize plugins, MCP servers and skills into DSH agent presets.	low	not audited	0/0/0	0/0	2026-10-22 02:16
@mryouyouHK/youyou-deepseek-chat-switch Switch between DeepSeek Chat and the native Harness interface	low	not audited	0/0/0	0/0	2026-10-22 02:16
@Mr-Maidong/dsh-plugin-workbench Work-item workbench for the DSH right Sidebar: per-workspace todos with fuzzy search, inline editing, and an idempotent write-back loop	low	not audited	0/0/0	0/0	2026-10-22 02:16
@Diluka/dsh-afk DSH AFK 插件：全局或会话级自动应答、禁用提问与持久未读记录	low	not audited	0/0/0	0/0	2026-10-22 02:16
@rshh0520/opencode-go-useage Opencodego package usage monitoring plugin for DSH	critical	medium	3/1/13	0/0	2026-10-22 02:16
@ninetyhe-90/dsh-decision-review	low	not audited	0/0/3	0/0	2026-10-22 02:16
@feely0208/dsh-decision-review 决策复盘：把审批台账整理成可复盘报告——关键决策、被拒原因、待复审项与复盘问题清单	low	not audited	0/0/1	0/0	2026-10-22 04:16
@xiaoso456/dsh-tool-step-note 给 DSH 工具加上模型填写的步骤说明	low	not audited	0/0/2	0/0	2026-10-22 04:16
@EdgarsKalnins/dsh-gemini-notebook-mcp DSH plugin for Gemini Notebook / Google NotebookLM MCP: notebooks, sources, grounded Q&A, research, audio podcasts, video, slides — 53 tools via notebooklm-mcp-cli	low	not audited	0/0/0	0/0	2026-10-22 04:16
@CoraEJones/dsh-web-workbench DSH native plugin for real browser interaction, PDF reading, offline Chinese/English OCR and video frames.	medium	not audited	0/2/7	0/0	2026-10-22 04:16
@john-walks-slow/dsh-os DSH OS: turn the DSH Web home page into a cyberpunk terminal desktop — ASCII backgrounds, boot POST sequence, live system/Harness telemetry HUD.	low	not audited	0/0/0	0/0	2026-10-22 04:16
@2239058652/dsh-loomy-connect Fork of gdrpzym/dsh-loomy-connect adapted to DSH 0.2.1.	low	not audited	0/0/5	0/0	2026-10-22 04:16
@Kaitox326/dsh-auto-prompt DSH 插件：一句话变成可用的图片/视频提示词；打开生成开关后直接调用你自己的模型或 API 出图出片。	low	not audited	0/0/1	0/0	2026-10-22 04:16
@lixiangdong122333/dsh-notify Windows toast notifications for DeepSeek-Harness: get pulled back when a task finishes or the agent needs you.	medium	not audited	0/3/9	0/0	2026-10-22 04:16
@cannebergeee/dsh-session-folder DSH plugin: right-click a Session row for its menu (Open in File Explorer) and a conversation file name for open / reveal / VS Code / copy path.	low	not audited	0/0/1	0/0	2026-10-22 04:16
@AhaCrazy/dsh-action-hub DSH plugin: a user-invoked Action shelf for reusable prompts and flows - no context cost, no automatic triggering.	medium	not audited	0/1/0	0/0	2026-10-22 04:16
@dingchenhui0618-arch/dsh-mask-pixel-lock Prove a local image edit left every pixel outside the mask untouched: per-pixel comparison, difference heatmap and a SHA-256 proof report. DSH plugin + zero-dependency CLI.	low	not audited	0/0/0	0/0	2026-10-22 04:16
@Zxznb666/dsh-qoder-cn-subagent 把 Qoder CN 注册为 DSH 的子智能体后端：复用原生登录与设置，一次委派一个任务。	low	not audited	0/0/0	0/0	2026-10-22 04:16
@feely0208/dsh-enterprise-suite 深鲸企业审计套件：审批台账 + 决策复盘 + 审计报告 + 定时复盘，一个授权全部可用（商业授权，14 天试用）	medium	not audited	0/1/5	0/0	2026-10-22 04:16
@BlueX888/dsh-plugin-oss-contrib Deep Harness plugin for OSS contribution pipeline (hunt/ship/track)	low	not audited	0/0/0	0/0	2026-10-22 04:16
@feely0208/dsh-approval-ledger 审批台账：记录 agent 每次需要审批的操作（风险/决策/结果），gate 模式可拦高危动作	low	not audited	0/0/3	0/0	2026-10-22 04:16
@sanser9/dsh-opencode-connect 把 OpenCode 的免费模型接入 DSH — bring OpenCode free models into DSH with zero configuration.	low	not audited	0/0/0	0/0	2026-10-22 04:16
@Yoimiya-Lover-0621-01/dsh-plugin-font-switcher Chinese/Latin font switcher plugin for DSH: separate Chinese and Latin font rows with system lists and TTF/OTF upload.	low	not audited	0/0/0	0/0	2026-10-22 04:16
@twoweeks1995/dsh-appdata-scanner DSH 只读 AppData 分析插件：资源管理器式下钻浏览，显示每个目录的体积、来源软件、用途与可删建议，支持按需联网查询	medium	not audited	0/1/6	0/0	2026-10-22 04:16
@dingchenhui0618-arch/dsh-mp-catalog-guard WeChat mini-program content catalog guard for DSH: integer amountFen, money()-only rendering, required fields, duplicate copy, image paths — issues plus an applyable unified diff (dry-run by default).	low	not audited	0/0/0	0/0	2026-10-22 04:16
@zengshuaishuai/dsh-mcp-manager-web DSH 的 MCP 可视化管理器：列表 + 详情页，查看工具 schema / 提示 / 资源，支持增删启停与连接测试	low	not audited	0/0/0	0/0	2026-10-22 04:16
@esketids/dsh-deepseek-peak-clock DeepSeek peak/off-peak price clock for the DSH composer HUD	low	not audited	0/0/0	0/0	2026-10-22 04:16
@AlannerFranklin/dsh-relay-isolation Provision a separate DSH_HOME for a model relay, so relay traffic never shares your main Harness sessions or credentials.	medium	not audited	0/2/4	0/0	2026-10-22 04:16
@MnemosyneOS/dsh-ai-memory Mnemosyne OS memory for DSH — auto-register, remember, recall	low	not audited	0/0/0	0/0	2026-10-22 04:16
@JKL-agents/toollery-dsh A community-maintained Toollery integration for DSH, enabling scalable, training-free skill and tool retrieval.	low	not audited	0/0/0	0/0	2026-10-22 04:16
@uugvkbvkdjbsdbvwxxl/dsh-plugin-web-annotate Annotate elements on a page in the DSH built-in browser and send the comments to the session in one click.	low	not audited	0/0/0	0/0	2026-10-22 04:16
@zhangaiyu1996/dsh-glm-usage 展示智谱 GLM Coding Plan 用量的 DSH 插件 — sidebar quota card for Zhipu / Z.AI Coding Plan in DSH	low	not audited	0/0/0	0/0	2026-10-22 04:16
@1644ye/pages Shopify Page Studio for DSH: conversation generation, prompt workbench and Matrixify XLSX pages and menus.	low	not audited	0/0/0	0/0	2026-10-22 04:16
@Clukay-Fun/dsh-codex-link DSH plugin: sign in with ChatGPT, use GPT models, and see the account's quota.	low	not audited	0/0/0	0/0	2026-10-22 06:16
@oxygenforce/dsh-token-usage-badge 在每条回答下方常驻显示本轮 Token 用量、回答耗时与会话累计 Token / Per-reply token usage, answer duration and session total for DSH	low	not audited	0/0/0	0/0	2026-10-22 06:16
@zimo-2233/dsh-html-visual-editor Edit generated HTML on the rendered page inside the DSH sidebar.	low	not audited	0/0/0	0/0	2026-10-22 06:16
@BlackRasion/dsh-chat-avatars 给 DSH Web GUI 的聊天头像插件：全局默认与工作区覆盖、交互裁剪、动图头像、大图预览与拍一拍。	low	not audited	0/0/0	0/0	2026-10-22 06:16
@IDKURLOVE/dsh-reset-button One-click Restart button for DSH: relaunch from the composer toolbar, right beside the permission control - no more closing and reopening the app after installing a plugin.	low	not audited	0/0/0	0/0	2026-10-22 06:16
@Callay02/dsh-ssh SSH terminal, SFTP, remote metrics and agent tools for DSH	medium	not audited	0/2/1	0/0	2026-10-22 06:16
@ApakohZzz/dsh-custom-json-mcp DSH-JsonMCP配置UI及组件	low	not audited	0/0/0	0/0	2026-10-22 06:16
@msun1999/dsh-next-suggestion Inline next-reply suggestion for the DSH composer: predicts your most likely next message and fills it on Tab.	low	not audited	0/0/0	0/0	2026-10-22 06:16
@Rinai-R/dsh-omp-retry OMP-style HTTP 429 retry policy for the DSH	low	not audited	0/0/0	0/0	2026-10-22 06:16
@TobiichiOrigamii/dsh-crosssession Cross-session messaging, persistent session team, approval gates and a per-session task board for DSH.	medium	not audited	0/5/5	0/0	2026-10-22 06:16
@zyfgood/dsh-mobile DSH mobile web UI: browse all sessions and continue conversations from a phone on the same LAN. ??? Web UI ???	low	not audited	0/0/11	0/0	2026-10-22 06:16
@LUTAO581314/dsh-plugin-catalog Adds search and market-category grouping to the DSH Installed plugins page, including built-in and experimental plugins.	medium	not audited	0/1/3	0/0	2026-10-22 06:16
@qt9494/dsh-seeyon-workbench	low	not audited	0/0/3	0/0	2026-10-22 06:16
@chai-yinfeng/dsh-macos-restart macOS 桌面版一键重启 / One-click restart for the DSH desktop app.	medium	not audited	0/5/12	0/0	2026-10-22 06:16
@lg114/dsh-md-live DSH independent right-panel Markdown live preview: edit + render side by side, auto-refresh on file change, send selection back to chat.	low	not audited	0/0/0	0/0	2026-10-22 06:16
@kx121/github-duty 到点叫醒 DSH 会话，翻你关注的 GitHub 仓库和主题，挑出值得跟的变化，写日报、记判重表。只读。	low	not audited	0/0/0	0/0	2026-10-22 06:16
@2073493463-crypto/dsh-splash-animation-setup 在 DSH Desktop 上安装、配置和排查开屏动画插件的可复现流程	low	not audited	0/0/0	0/0	2026-10-22 06:16
@Eason-22/dsh-autorestart DSH 插件：重启不打断工作——等所有对话空闲后优雅重启，重启后自动接着干。AI 生成、未人工审核，谨慎使用。	high	medium	1/5/11	0/0	2026-10-22 06:16
@AnichHaveatry/dsh-client-ui-branch-map DSH 会话视图「分支图」：把当前工作区的对话画成一张图——每条消息是一个节点，每个 Session 是节点上的分支引用，可以像 git 分支一样从任意节点切出去；归档的对话不进图。 DSH conversation view: the current workspace as a branch map, with Sessions as branch refs you can fork from.	low	not audited	0/0/0	0/0	2026-10-22 06:16
@ccclucky/dsh-plugin-session-rename DSH plugin that gives the agent a native session_rename tool backed by the Cordis sessionTitle service.	low	not audited	0/0/0	0/0	2026-10-22 06:16
@LateralCircle83/dsh-officecli-connection Give DSH an Office engine: one officecli tool plus OfficeCLI's ten bundled guides as runtime skills. Point it at the binary you already installed — nothing is downloaded, nothing written outside its own settings file.	low	not audited	0/0/0	0/0	2026-10-22 06:16
@tengyinan1994/dsh-project-runner Grouped run panel for DSH: one click starts a project's services in a real PTY, streams live output, and keeps each run's log on disk for the agent to read.	low	not audited	0/0/0	0/0	2026-10-22 06:16
@zdkcomeon/dsh-mcp-link	low	not audited	0/0/0	0/0	2026-10-22 06:16
@huangxicheng1/dsh-garmin-health Garmin Connect dashboard for DSH: left-sidebar panel entry, full-page charts, direct Garmin REST API, reuses a local Garmin token. No MCP, no npm dependencies.	low	not audited	0/0/0	0/0	2026-10-22 06:16
@lihua12345670-jpg/dsh-bili-audio DSH 插件：B站音频悬浮播放条，宿主反向代理解决 CDN Referer 403，带队列/进度/倍速	low	not audited	0/0/0	0/0	2026-10-22 06:16
@matata2017/dsh-codex-hooks Codex-compatible lifecycle hooks for DSH: discover hooks.json from config, plugins and projects, review each hook's sha256 trust fingerprint, run the trusted ones, and manage them from a Hooks settings section.	low	not audited	0/0/0	0/0	2026-10-22 06:16
@wufengwind/dsh-plugin-dm-ops Dameng inspection, security and recovery-condition assessment for DSH	medium	not audited	0/2/1	0/0	2026-10-22 06:16
@kejuecy/dsh-skills	medium	not audited	0/1/6	0/0	2026-10-22 06:16
@llCCII/dsh-group-tab Workgroup - a DSH right-sidebar tab showing who is working, what they are doing and how long is left. Live agent activity as a group chat.	low	not audited	0/0/4	0/0	2026-10-22 06:16
@Esper967/dsh-music-insight 让你的dsh模型感受音乐	low	not audited	0/0/0	0/0	2026-10-22 06:16
@mailmrcai/dsh-hermes-session Import sessions from a local Hermes Agent into the current DSH conversation as bounded, untrusted background context.	low	not audited	0/0/0	0/0	2026-10-22 08:16
@InariNGT-Ofiicial/dsh-plugin-updates DSH 插件自动更新：连接原 GitHub 仓库，默认每 24 小时检查并安装更新，支持人工控制、备份与失败回退。	low	not audited	0/0/0	0/0	2026-10-22 08:16
@Natsubrei/dsh-comfyui-panel The real ComfyUI editor inside the DSH Web UI: per-session workflow tools and panel-managed ComfyUI. / 在 DSH 里嵌入真正的 ComfyUI 编辑器。	low	not audited	0/0/0	0/0	2026-10-22 08:16
@lifwsp/dsh-issue-priority DSH plugin: plans accumulated GitHub Issues into ordered work packages in the background (decision model + deterministic rules, no LLM) and shows the next one in the sidebar	low	not audited	0/0/0	0/0	2026-10-22 08:16
@Subwoofer91/dsh-default-workspace DSH 插件：点击新对话页工作区前的文件夹图标，一键切回默认工作区	low	not audited	0/0/0	0/0	2026-10-22 08:16
@danilinao/dsh-telegram-channel-ru	low	not audited	0/0/0	0/0	2026-10-22 08:16
@feely0208/dsh-memory-doctor 深鲸记忆：跨会话热记忆 + 记忆体检/瘦身/记忆包。本地明文、零依赖、不上传数据。	low	not audited	0/0/0	0/0	2026-10-22 08:16
@K1tor/dsh-req-search DSH 后台项目研究引擎：说出需求即自动在后台调研并把结果交给 Agent	low	not audited	0/0/0	0/0	2026-10-22 08:16
@seventeenlyc/dsh-rea-mcp-toggle Toggle REA MCP tools from DSH Plugins	low	not audited	0/0/0	0/0	2026-10-22 08:16
@otvaket/dsh-delivery-native-open Open a delivered file in its default desktop application from the DSH delivery card.	low	not audited	0/0/0	0/0	2026-10-22 08:16
@FutureHai/dsh-chat-plugin 在 DSH Desktop 的主面板打开官方 DeepSeek Chat 网站。左侧入口可在 Chat 与 Agent 间切换，切换时不会重载 Chat 网页。	low	not audited	0/0/0	0/0	2026-10-22 08:16
@klT45/dsh-music-dj AI DJ for DSH: turn a sentence into a song; searches and switches tracks through a local LX Music instance (bundles no audio sources).	low	not audited	0/0/0	0/0	2026-10-22 08:16
@yangzhenyu0817/dsh-session-color Right-click any session row in the DSH sidebar to color-tag it (default red, ten palette colors, custom picker). / 给 DSH 侧栏会话行加右键标色。	low	not audited	0/0/0	0/0	2026-10-22 08:16
@YiKangMo/dsh-prompt-enhancer DSH 的「增强提示词」按钮：一次辅助 LLM 调用把草稿改写成结构化提示词，支持加载态、失败重试与一键回退。Prompt enhancer button for DSH.	low	not audited	0/0/0	0/0	2026-10-22 08:16
@Tansukii/dsh-screenshot DSH内置截图工具：即时框选、标注、取色，全部本地。Built-in screenshot tool for DSH on Windows: instant region capture, annotations, colour picker, all local.	low	not audited	0/0/0	0/0	2026-10-22 08:16
@n431mn/lazy-workspace-manager DSH Web plugin that keeps the sidebar empty and loads a Workspace and its sessions only for the folders you add. \| DSH 按目录加载工作区与会话：侧栏默认留空，添加哪个目录就只加载哪个目录。	low	not audited	0/0/0	0/0	2026-10-22 08:16
@Anonymity606/super-baby 超级大宝贝：DSH 左下角的像素核导弹，连点蓄力、音效、爆炸与退出。	low	not audited	0/0/0	0/0	2026-10-22 08:16
@SuShuheng/dsh-budget-view DSH 插件：在输入栏和新会话页展示 Codex 额度、DeepSeek 余额、波峰/波谷状态，并按 DeepSeek 官方人民币峰谷价估算会话费用。	low	not audited	0/0/9	0/0	2026-10-22 08:16
@TTTimas/dsh-plugin-balance-tokens DSH plugin: account balance and session token status strip below the workspace	low	not audited	0/0/0	0/0	2026-10-22 08:16
@757400/dsh-workbuddy-checkin 结合work Buddy connect插件，自动进行workbuddy每日签到，不打开workbuddy也能拿积分	high	medium	1/4/12	0/0	2026-10-22 08:16
@yal3ay/commandcode-usage-dsh Command Code plan usage (5h / weekly windows, monthly credits) as a settings page in DSH	low	not audited	0/0/2	0/0	2026-10-22 08:16
@pixelsoyo/dsh-unity-bridge	low	not audited	0/0/8	0/0	2026-10-22 08:16
@Gahulv/dsh-server-ops-monitor DSH SSH Ops companion: read-only server metrics and streaming Agent command output in the native sidebar.	low	not audited	0/0/2	0/0	2026-10-22 08:16
@thdlrt/dsh-workspace-hot Create and archive DSH sessions from outside the running Host — no restart, no refresh. 让运行中的 DSH 从外部创建/归档会话。	medium	not audited	0/1/1	0/0	2026-10-22 08:16
@1731988818/dsh-lan-remote Expose the running DSH desktop web GUI to a phone - the same session through a loopback reverse proxy, with LAN and Tailscale token URLs. No second harness.	medium	not audited	0/2/10	0/0	2026-10-22 08:16
@xunyyds/dsh-context-presets 按模型自定义上下文窗口的 DSH 插件	low	not audited	0/0/0	0/0	2026-10-22 08:16
@maxcloser/a-share-screener-push	medium	not audited	0/1/3	0/0	2026-10-22 08:16
@yal3ay/opencode-usage-dsh OpenCode Zen/Go quota usage (5h rolling, weekly, monthly) as a settings page in DSH	low	not audited	0/0/1	0/0	2026-10-22 08:16
@RoderickWilliams/dsh-local-3d-studio DSH plugin: local 3D studio orchestration with Three.js procedural modeling, multi-view rendering, and auto-detection of Blender / COLMAP / ComfyUI.	medium	not audited	0/5/12	0/0	2026-10-22 08:16
@Limsanity/dsh-layout-persist Persist the DSH Web frame's left sidebar and right panel widths across restarts.	medium	not audited	0/1/15	0/0	2026-10-22 08:16
@RoderickWilliams/dsh-picture-text-reader DSH plugin: batch-read Xiaohongshu notes and WeChat articles with local OCR, every result carrying its source URL. Read-only.	medium	not audited	0/3/13	0/0	2026-10-22 08:16
@zuwenyin/dsh-plugin-upgrader One-click upgrades, version history and rollback for plugins on the DSH Plugins page	low	not audited	0/0/6	0/0	2026-10-22 08:16
@kiefeng/dsh-avatar-top Moves the DSH sidebar account avatar out of the bottom strip: four placements (including a zero-height inline mode), three heights, and a settings card on the Plugins page.	low	not audited	0/0/0	0/0	2026-10-22 08:16
@wei2yun/dsh-api-cost DSH plugin: live API cost per chat, subagents, and the whole machine.	low	not audited	0/0/2	0/0	2026-10-22 08:16
@kangjiazhen/dsh-workbuddy-codex DSH plugin that supervises the local WorkBuddy reverse-proxy chain (wb2api gateway + Responses API bridge), so the provider port is always answering	medium	not audited	0/9/21	0/0	2026-10-22 08:16
@jryang1997/dsh-ascii-whales DSH 插件：文字组成的俯视鲸鱼背景，纯字符 / 彩色字格 + ASCII，五种鲸类，阅读区与输入框毛玻璃，鱼群避让，全滑块设置。	low	not audited	0/0/0	0/0	2026-10-22 08:16
@zhangguitao666/meeting-suite Two DSH plugins: task calendar + meeting minutes (live transcription, Tencent Meeting notes, AI minutes, auto-ingest)	medium	not audited	0/5/12	0/0	2026-10-22 08:16
@Oxmyxo/dsh-markji-bridge Give a DSH agent Markji (maimemo) cards: local SQLite cache, plain-text search, queued edits, archive, background sync with crash-resume.	low	not audited	0/0/3	0/0	2026-10-22 10:16
@doraasn/dsh-cloud-sync DSH 插件：把技能 / 插件源码 / DSH 配置 / 全局指令 / 可选加密凭据备份到任意 WebDAV（坚果云、Nextcloud、群晖、ownCloud、AList）	medium	not audited	0/4/4	0/0	2026-10-22 10:16
@sixzjd/dsh-opencode-connect 将 OpenCode Zen 的模型接入 DSH（含免费模型池）— OpenCode Zen models in DSH	medium	not audited	0/2/11	0/0	2026-10-22 10:16
@fg-time/dsh-pp dsh-purge 社区衍生版 v1.1.73: 适配 DSH 0.2.1 (修 {{cwd}} 崩溃) + workspaceGate 按工作区启用 \| community fork of dsh-purge	medium	not audited	0/4/5	0/3	2026-10-22 10:16
@xxxxxxxx2/dsh-peak-valley-reminder DSH 峰谷提醒插件：会话标题栏「模式」之后显示高峰/空闲时段并倒计时切换	low	not audited	0/0/0	0/0	2026-10-22 10:16
@AIcivilization/dsh-mishu DSH 小秘书：替你盯着 GitHub 通知（按当前状态分诊，已解决的替你关掉）并记住你交代的到期事项（账单、续费、证件、生日），密码只进系统钥匙串。中英双语，macOS/Windows/Linux \| DSH secretary: triages GitHub notifications by real state, tracks dated reminders, keychain-only secrets.	low	not audited	0/0/0	0/0	2026-10-22 10:16
@AhaCrazy/dsh-nav-history DSH plugin: global back/forward navigation history across sessions and whole-page panels, with a configurable bottom strip and browser-style shortcuts.	low	not audited	0/0/3	0/0	2026-10-22 10:16
@doraasn/dsh-web-chat Chat panel for DSH: embeds chat.deepseek.com, keeps the page alive across panel switches, remembers the last conversation.	low	not audited	0/0/5	0/0	2026-10-22 10:16
@leexrisy/dsh-plugin-medical-literature Medical literature search, citation formatting, and open-access full text for DSH (PubMed, Europe PMC, arXiv, bioRxiv, medRxiv).	low	not audited	0/0/4	0/0	2026-10-22 10:16
@Ck-epsilon/Aura Aura — small, focused tools for agents and people. Monorepo for AuraArgus and AuraCardea.	low	not audited	0/0/1	0/0	2026-10-22 10:16
@zdd3143/dsh-vision-click 让 Agent 用鼠标和键盘操作 Windows：Windows OCR 定位界面文字 → 真实点击/拖动/滚轮/键入 → 像素与文字双重复核。DSH 插件，无需视觉大模型，F6+F7 急停。	medium	not audited	0/3/1	0/0	2026-10-22 10:16
@Kiol-V/dsh-agent-tool-filter Per-agent tool filter for the main agent (orchestrator) in DSH — minimal toolset for the orchestrator, full toolset for subagents.	low	not audited	0/0/2	0/0	2026-10-22 10:16
@lsy-loren/dsh-lsy-feature-pack 界面功能增强：支持会话删除、支持图片皮肤。	low	not audited	0/0/5	0/0	2026-10-22 10:16
@YearnCy/dsh-question-tree DSH Desktop 插件：使用树形结构解决线性对话上下文过长而导致回顾问题、记录问题困难的结症，允许同时记录多个问题，自定义问题深度。增加划词功能，支持添加到对话或添加到问题树。选区浮出动作栏、引用 chip、右栏问题树——记住你还没搞懂的地方，而不是让你在长对话里往回翻。	low	not audited	0/0/8	0/0	2026-10-22 10:16
@hstony7462/dsh-youtube-scroll DSH plugin: daily YouTube scroll — channel RSS + keyword search → transcript-first selection (local Whisper fallback, thumbnail vision) → Traditional Chinese daily report on an off-peak schedule.	medium	not audited	0/6/15	0/0	2026-10-22 10:16
@SOVLOOKUP/dsh-mise Toolchain manager for DSH (backed by mise): a settings page for installed and available versions, .mise.toml-driven install / use / uninstall / prune, PATH activation, and nine agent tools.	medium	not audited	0/1/6	0/0	2026-10-22 10:16
@LCspax/dsh-ocgo-ring OpenCode Go quota ring for DSH: three windows beside the composer context meter.	low	not audited	0/0/4	0/0	2026-10-22 10:16
@ShoWin2333/dsh-share-image DSH plugin: share selected conversation messages as a PNG card.	low	not audited	0/0/0	0/0	2026-10-22 10:16
@kemomimi12/dsh-auto-continue Automatic turn-level resume for DSH: continues after transient model-request failures, merges provider outages into one storm, and always yields to a manual stop.DSH 自动续行插件：模型请求临时失败导致轮次中断后自动接着做；同一次网关故障只重试一次；手动停止永远优先。	low	not audited	0/0/0	0/0	2026-10-22 10:16
@stushansusu/dsh-delete-guard DSH plugin: meters AI deletions per session, terminates the call once the cumulative size passes a threshold, then asks the user with the list of files already deleted.	low	not audited	0/0/4	0/0	2026-10-22 10:16
@Doomsgeats/dsh-bili-feed B站热榜/搜索/详情/弹幕，做成 DSH 的 MCP 工具：不登录、零依赖、返回压好的纯文本	low	not audited	0/0/4	0/0	2026-10-22 10:16
@androidly/dsh-restart-control DSH Web sidebar restart control: graceful host exit, supervisor-aware replacement, pid-verified status notice.	medium	not audited	0/1/8	0/0	2026-10-22 10:16
@brantshin/dsh-native-glass Native macOS glass for Anywhere Labs DSH Desktop — transparent chat surfaces with live behind-window blur.	low	not audited	0/0/3	0/0	2026-10-22 10:16
@tsukii12/dsh-remote-portal An authenticated front door for DSH: LAN scan-to-pair and public access through your own relay. 为 DSH 添加远程访问能力，支持局域网和公网访问。	medium	not audited	0/5/22	0/0	2026-10-22 10:16
@qiqingyo/dsh-daily-tasks Calendar-synced daily task checklist plugin for the DSH Web UI.	low	not audited	0/0/2	0/0	2026-10-22 10:16
@Pandasywithfantasy/dsh-topic-for-each-turn Per-turn topic and conclusion outline plugin for DSH: native right-sidebar topics, fork inheritance, up to 3 concurrent sessions.	low	not audited	0/0/4	0/0	2026-10-22 10:16
@Gqwu01/dsh-plugin-bootanim DSH 视频开机动画插件：打开 DSH 时播放你选的一段视频，刷新不重播，在插件页里换片。	low	not audited	0/0/4	0/0	2026-10-22 10:16
@kaijia323/dsh-mobile-ui DSH Web 的移动端外壳插件：抽屉式导航、触控尺寸控件、安全区适配、对话区占满整屏，桌面端行为不变。	low	not audited	0/0/0	0/0	2026-10-22 10:16
@Xantares330/dsh-codex-consult On-demand consultation with the OpenAI Codex CLI from DSH: read-only reviews, inline evidence, verified model provenance, quota guardrails and durable call logs.	medium	not audited	0/5/6	0/0	2026-10-22 10:16
@1378616343/dsh-zoom-viewer DSH plugin: zoomable image viewer for the DSH sidebar - wheel zoom, drag to pan, fit/width/1:1, fullscreen.	low	not audited	0/0/0	0/0	2026-10-22 10:16
@kiranasuka/dsh-exa-search	medium	not audited	0/1/8	0/0	2026-10-22 10:16
@Zilize/parallax-dsh DSH plugin for comprehensive arXiv literature search, with Jev-powered AI screening and classification.	low	not audited	0/0/1	0/0	2026-10-22 10:16
@Tazewell/dsh-session-tidy Delete DSH sessions into a recoverable 7-day trash, and edit an already-sent request by branching. A DSH plugin.	low	not audited	0/0/5	0/0	2026-10-22 10:16
@Hamster1214/dsh-pet-lan 大肥鱼桌宠联机	medium	not audited	0/3/22	0/0	2026-10-22 12:16
@marksimZ/dsh-balance-guard DSH plugin: your DeepSeek account balance as a colour-banded bar on the right edge, with per-turn cost prediction and a quiet low-balance warning.	medium	not audited	0/2/14	0/0	2026-10-22 12:16
@hunyu-feng/dsh-plugin-usage-pulse DSH Web UI plugin: live DeepSeek peak / off-peak pricing, token spend and hourly usage bars in the composer dock.	low	not audited	0/0/2	0/0	2026-10-22 12:16
@meisijiya/dsh-hindsight-memory DSH 插件：把 Hindsight 记忆服务接到 DSH，与 omp 共用同一记忆库/同一套标签语义（单库 + 全局层/项目层双层标签），模型只看见封装后的语义化工具	medium	not audited	0/6/13	0/0	2026-10-22 12:16
@Natsubrei/dsh-mermaid Mermaid diagrams in the DSH right sidebar: a client plugin with in-card zoom and pan.	low	not audited	0/0/3	0/0	2026-10-22 12:16
@slicenferqin/dsh-mobile A task-first mobile workspace for DSH, with session overviews, compact input, and full-record access.	low	not audited	0/0/9	0/0	2026-10-22 12:16
@lbyxunxunnini/dsh-agent-pm Agent PM: product-manager-style review for Claude Code and DSH agent projects	low	not audited	0/0/0	0/0	2026-10-22 12:16
@Xxsttb/dsh-sillytavern-presets [AI 制作] 在 DSH 中导入、编辑、切换 SillyTavern AI 预设，支持 JSON 导入导出、提示词顺序编辑与归档/删除。	low	not audited	0/0/4	0/0	2026-10-22 12:16
@cuijiajun/dsh-session-top-new dsh-plugin最新会话列表	low	not audited	0/0/3	0/0	2026-10-22 12:16
@liangTc/dsh-become-human 基于 DSH 的自主 Agent 插件，支持自定义人格、长期记忆、自主学习、主动交流与任务执行，Web 和 IM 共享唯一会话。当前为测试版本，功能持续开发完善中。	low	not audited	0/0/0	0/0	2026-10-22 12:16
@BAOXIAOPAI/dsh-glacier Glacier-blue glass UI layer for the DSH web client — light-field canvas, frosted panels, flat controls. Shipped as a dsh plugin.	low	not audited	0/0/0	0/0	2026-10-22 12:16
@guhanfei-ai/dsh-model-http-proxy 模型代理：按模型/提供方精准路由模型 API 流量（走代理或直连），其余请求不受影响 —— Route model-API traffic per provider through proxies, everything else stays direct.	low	not audited	0/0/4	0/0	2026-10-22 12:16
@hunyu-feng/dsh-vision Vision for DSH agents and MCP clients: analyze_image over local files or URLs using Doubao models on Volcano Ark, with model fallback.	high	medium	2/3/9	0/0	2026-10-22 12:16
@chencujinlin/dsh-task-personas DSH 飞书会话人格、表情与自主群聊；内含配套 IM Connect 人格扩展版 1.0.8-personas.6	low	not audited	0/0/0	0/0	2026-10-22 12:16
@gongfpp/dsh-novel-fish Read local novels only when expanding selected real DSH reasoning steps. Local-only; no model requests.	low	not audited	0/0/0	0/0	2026-10-22 12:16
@Git-fans1100/dsh-skill-router dsh-skill-router：DSH 技能检索路由插件	low	not audited	0/0/1	0/0	2026-10-22 12:16
@arcnapan/dsh-chat-answer-anchor Freeze the DSH chat scroll position so new replies no longer drag the viewport to the bottom.	low	not audited	0/0/2	0/0	2026-10-22 12:16
@Ravomi/dsh-graphify-skill DSH bundle: graphify knowledge-graph MCP server + packaged graphify skill, installed together	low	not audited	0/0/0	0/0	2026-10-22 12:16
@dddmxza/dsh-mimo-voice Xiaomi MiMo TTS voice plugin for DSH — speaks a line through your local speakers, with voice design, preview and approval alerts built in.	medium	not audited	0/5/6	0/0	2026-10-22 12:16
@apolenkov/dsh-provider-proxy Per-provider and per-model outbound proxy routing for DSH, with a Plugins configuration UI	low	not audited	0/0/3	0/0	2026-10-22 12:16
@anonamerjaxon-dev/dsh-model-grid Responsive card grid for the DSH composer model picker — host-only, no client bundle rebuild.	low	not audited	0/0/0	0/0	2026-10-22 12:16
@Ayelsh/dsh-glass-theme An Apple Liquid Glass skin for the DSH Web GUI: token-level re-key, glass chrome, a grouped model picker and a merged usage panel.	low	not audited	0/0/2	0/0	2026-10-22 12:16
@cainiaoNO1/dsh-better-display DSH Web GUI 的「阅读」视图插件自用维护版：过程折叠、实时思考卡片、最终回答聚焦；已脱离官方 DSHX 工具链，改用 esbuild + lightningcss 自建可复现构建。	low	not audited	0/0/0	0/0	2026-10-22 12:16
@www02310/dsh-go DSH 启动画面：亮白跑马灯 → 一笔写出 DSH。插件版（运行时注入，不改宿主文件）+ 原生补丁版。	medium	not audited	0/4/5	0/0	2026-10-22 12:16
@jiangking22/dsh-text-color-adaptive Adaptive text color for DSH: samples the wallpaper and recolors label text so it stays readable over any background.	low	not audited	0/0/0	0/0	2026-10-22 12:16
@yangzhenyu0817/dsh-settings-drag	low	not audited	0/0/3	0/0	2026-10-22 12:16
@caozeal/dsh-plugins	high	high	2/0/2	0/0	2026-10-22 12:16
@dthcle/dsh-header-modify	low	not audited	0/0/6	0/0	2026-10-22 12:16
@RAK7S/dsh-weather-whisper 天气轻语 · a soft weather card for DSH, with a tiny theme API	low	not audited	0/0/6	0/0	2026-10-22 12:16
@itsbuyru-bit/dsh-model-price Per-model API prices in USD or CNY, wallet balance and live session spend for DSH.	medium	not audited	0/1/5	0/0	2026-10-22 12:16
@hunyu-feng/dsh-video-digest DSH plugin: turn a video link (Bilibili / YouTube / any page) into a transcript-backed summary, and say plainly what evidence it used.	medium	not audited	0/3/12	0/0	2026-10-22 12:16
@Dogtiti/dsh-plugin-composer-history Shell-style prompt history for the DSH composer: ArrowUp walks back through the messages you already sent, ArrowDown walks forward and restores your draft.	low	not audited	0/0/1	0/0	2026-10-22 12:16
@cgc1965565186-lab/dsh-ascii-sharks Ambient ASCII sharks, fish and click ripples for the DSH desktop UI.	low	not audited	0/0/0	0/0	2026-10-22 12:16
@gu040303-ai/dsh-prompt-enhancer One-click plain-text prompt enhancement for DSH, with optional local checks and sentence review.	medium	not audited	0/1/5	0/0	2026-10-22 12:16
@kx121/dsh-github-digest 到点叫醒 DSH 会话，翻你关注的 GitHub 仓库和主题，挑出值得跟的变化，写日报、记判重表。只读。	low	not audited	0/0/1	0/0	2026-10-22 12:16
@NewSpringWei/dsh-subagent-opencode 连接本地或SSH远端opencode的子智能体插件	low	not audited	0/0/1	0/0	2026-10-22 12:16
@huanlin-labs/dsh-isolation-gate DSH plugin: default-deny directory authorization desk (isolation gate) with roster, groups, audit log and agent self-check	medium	not audited	0/2/3	0/0	2026-10-22 12:16
@Dogtiti/dsh-plugin-composer-predict Codex-style next-instruction prediction for the DSH composer: a Tab-to-accept suggestion rendered as the input placeholder.	low	not audited	0/0/2	0/0	2026-10-22 12:16
@anonamerjaxon-dev/dsh-preset-inspector Live preset inventory for DSH: which preset holds which tools, MCP servers and skills, in the Web GUI and from the CLI.	high	medium	2/0/1	0/0	2026-10-22 12:16
@xisnn/harness2-dsh Convert a Google Research Harness2 harness tree into a DSH agent-preset bundle	low	not audited	0/0/0	0/0	2026-10-22 12:16
@slicenferqin/dsh-remote-control Browser-only remote access for DSH: HTTPS tunnels, QR pairing, multi-device control, and rotating credentials.	medium	not audited	0/2/10	0/0	2026-10-22 12:16

Site-wide fused risk

Static + vet fused, dynamic raises applied (raise-only); 23532 entries in total

2026-10-22

266

critical

high

202

medium

22673

low

Critical-tier plugins (266)

claude-paper dsh-sentinel dsh-review-loop deepseek-harness-fnos dsh-for-vsc pi-mm-vision dsh-plugin-verify ds-web-ui deepseek-harness-desktop-7 dsh-plugin-manager dsh-fff deepseek-harness-plugins dsh-desktop-pet-2 dsh-science-workbench dsh-lan-2 dsh-workshop deepseekharnessremotegateway dsh-lorebookmd dsh-plugin-market-5 dsh-file-panel dsh-np-ppt deepseek-harness-android-app dsh-web-remote dsh-self-harness-tools dsh-change-review dsh-hotswap makocode dsh-skill-mcp-panel dsh-tavern-2 dsh-mc-agent dsh-web dsh-doctor-4 dsh-design-studio dsh-tailscale-console dhs-theme-plugin deepseek-harness-molt dsh-command-check-update dsh-auth-gate dsh-silly-plugin opendsh dsh-tool-code-review dsh-task-console dsh-agent-eval-2 deepseek-harness-plugins-3 dsher-bbs-plugin deepseek-harness-plugs-manage dsh-dev-server dsh-about-updater dsh-toolbox-web dsh-remote-public dsh-notifier-2 dsh-plugin-container dsh-desktop-huacai deepseek-herness-desktop paperlab chromex-browser dsh-github-tool dsh-lan-access-3 dsh-custom-ui dsh-pet-6 desk-harness dsh-plugin-lark dsh-webgate dsh-tavern-3 dsh-anchored-monitor dsh-neutrino living-dream-dsh dsh-comfyui dsh-desktop-68 dsh-wechatclawbot orbit-dsh-plugin dsh-perm-guard dsh-cc-plugins dsh-tool-generate-image dsh-routed-subagent dsh-swarm dsh-nuphus-mcp dsh-lark-all dsh-ide-panels chat-deepseek-vision deepseek-harness-liquid-glass-theme dshscan dsh-pwsh-direct dsh-capcheck dsh-minecraft-theme dsh-plugin-market-20 dsh-diffgeom dsh-remote-7 dsh-logcat dsh-ide-bridge dsh-mail-connector dsh-fleet dsh-desktop-tools-2 dsh-usage-6 dsh-mobileshare dsh-plugin-market-22 dsh-profile-port tavern-launcher dsh-file-links pdfreader dsh-publish-plugin dsh-workshop-3 dsh-qq-remote dsh-settings-pro dsh-github-push dsh-web-remote-frp dsh-pentester dsh-tool-lens dsh-testsuite codereader dsh-webroad weave-for-dsh dsh-tool-git-3 dsh-memory-eternal dsh-capability-manager dsh-arbitrary-host dsh-plugins-76 dsh-store dsh-lanchat dsh-k8s dsh-worktable dsh-tts-player dsh-agent-browser-2 dsh-image-read dsh-stats-expand dsh-usage-stats-11 dsh-input-enhancement dsh-safe-launch dsh-balance-plugin-6 atri-for-dsh convoport dsh-experience-library deepseek-harness-desktop-54 dsh-relay-2 dscoder dsh-inline-images-2 dsh-community-plugins-2 dsh-process-board dsh-rtk-tools dsh-plugin-offline-packager dsh-asset-manager dsh-vsceditor dsh-suhuang-scroll dsh-free-models-hub dsh-freeroute dsh-bg-plugin dsh-sandbox-permissions-not-strictly-wider-justification-empty-fix dsh-applauncher dsh-public-access dshessentialtools dsh-qrcode-hassle-free dsh-call-shrink dsh-automation-3 dsh-skill-hub-3 dsh-desktop-102 dsh-kit-4 dsh-plugin-ollama-monitor dsh-smart-reminder dsh-plugins-94 dsh-4-role-workflow dsh-raw-html-v2 dsh-gb dsh-git-review-2 dsh-plugin-canvas-pro dsh-search-pro dsh-git-9 dsh-tmwebdriver dsh-fleet-2 dsh-cc-backup dsh-token-pulse phone-tunnel-pool see-the-screen deepseek-harness-minimal-omni dsh-plugin-forge-5 dsh-session-progress dsh-move-rag dsh-cad-viewer dsh-agentic-proxy dsh-wechat-bridge-5 dsh-windows-remote-ssh dsh-remote-file-system dsh-better-display-2 dsh-better-uiux dsh-default-prompt dsh-agent-cluster dsh-sidebar-plus vscode-dsh-sidebar dsh-agnes-studio dsh-youdaonote dsh-plugin-repo-snapshot dsh-netease-music-2 dsh-lobsterai-daddy dsh-cua-preview dsh-buddy-spike dsh-novel-app dsh-desktop-settings dsh-zcode-connector anoslide-plugins dsh-destinywind-tpm dsh-waker voice-input dsh-draw-plugin dsh-ipynb-preview dsh-ask-form dsh-remote-access-cidr dsh-genbox-plugin dsh-wsl-projects dsh-mcp-unified-panel dsh-archive-keeper-plugin dsh-nutstore-backup dsh-kp-notes dsh-flow-3 dsh-aoci dsh-service-board cad-ppt-skills dsh-wb dsh-web-app dsh-text-explain dsh-ledger-memory dsh-artcraft dsh-remote-13 zadloop-ultimate-toolkit dsh-ai-ball dsh-mcp-manager-19 dsh-deploy-web dsh-plugin-cdp dsh-upgrade-2 dsh-envkit dsh-desktop-app-4 dsh-pwa-launcher dsh-steal-code dsh-tools-5 dsh-helper-plugin-workspace-browser dsh-console-plugin dsh-olivia-bridge dsh-obsidian-sync-2 dsh-git-server dsh-android-scrcpy zcode-dispatch dsh-armor-switch dsh-tool-suite pi-control-chrome dsh-skill-market-4 dsh-chatsync dsh-liquid-glass-theme-2 dsh-remote-gui dsh-plugins-151 dsh-plugin-30 dsh-skill-creator-5 dsh-xl-free-model dsh-browser-agent-4 dsh-plugin-market-30 dsh-maplestory-wz dsh-tool-mathfig dsh-phone-bridge-3 dsh-latex-studio dsh-6 dsh-brand-text mindie-agent-dsh dsh-bili-scroll-2 wa-agent dsh-opencode-free-3 dsh-phone-remote-2 dsh-android-phone dsh-dispatch-2 dsh-pocket-oauth

Static heuristic scan + manifest audit — not a full security audit; no code execution, no dependency resolution. Dynamic tiers come from the model reading source context (highest finding) and never exempt a static finding.

Daily report archive

67 reports

← Back to security reports

What does this daily report cover?

This report covers plugins first indexed by dsh.so on 2026-10-22. For each new plugin it records the name, risk tier, scan verdict, critical/warning/info findings, manifest audit signals, and index time. Plugins that were already in the registry before that date are not included.

How are the risk tiers assigned?

Risk tiers follow the same public model used across the site. Critical is reserved for secrets, exfiltration, destructive commands, or mining; other critical-level findings and warnings are reported as medium (needs review), and low for plugins with no meaningful findings.

Why is this not a full security audit?

The daily scan is a static heuristic scan plus manifest audit. It does not execute code or resolve dependencies, so it cannot prove that a plugin is safe. Use the report to prioritize inspection, not to replace it.

What does the "Manifest" column mean?

Manifest here is the vet engine's semantic analysis of the plugin's JSON manifest — not the dynamic security audit. It flags declaration-level signals such as install scripts, lifecycle hooks and broad file or network permissions.

Is the static scan the only layer?

No. A second, model-driven dynamic security audit runs on top of it for entries the static scan already flags as needing review: it reads source context without executing plugin code, covers that subset only, and its conclusions can raise a verdict but never exempt one. The verdict shown across the site is the stricter of the two (max of static and dynamic). This daily report reflects the static layer. As of the latest run: 1970 dynamic audit records, 1840 with a model conclusion, 274 raised above the static verdict, 0 lowered below it.

Source: dsh.so security standards · Maintained by dsh.so · Published 2026-10-22